d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Drop privileges in worker processes.

Browse Source 
Accepting connections and handshaking in secondary is still done before
dropping privileges. It should be implemented by only accepting connections in
privileged main process and passing connection descriptors to the worker, but
is not implemented yet.

MFC after:	1 week
This commit is contained in:
Pawel Jakub Dawidek 2011-01-28 22:35:46 +00:00
parent 49499e981e
commit 6d7967de8a
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=218049
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sbin/hastd/primary.c
View File

@ -847,6 +847,11 @@ hastd_primary(struct hast_resource *res)
init_ggate(res);
init_environment(res);
if (drop_privs() != 0) {
cleanup(res);
exit(EX_CONFIG);
}
/*
* Create the guard thread first, so we can handle signals from the
* very begining.

3
sbin/hastd/secondary.c
View File

@ -413,6 +413,9 @@ hastd_secondary(struct hast_resource *res, struct nv *nvin)
init_local(res);
init_environment();
if (drop_privs() != 0)
exit(EX_CONFIG);
/*
* Create the control thread before sending any event to the parent,
* as we can deadlock when parent sends control request to worker,